A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interf…

High CVSS 8.8

CVECVE-2024-32011

First seen2026-09-26 22:16 UTC

Disclosed2025-11-11 21:15 UTC

Last updated2026-09-26 22:16 UTC

Channel statusauto

Summary

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://cert-portal.siemens.com/productcert/html/ssa-339694.html

Timeline

2026-09-26 nvd_ingest NVD